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SUMMARY 


In order to establish compliance with recent changes to British Civil Air- 
worthiness Requirements it has been necessary to develop methodology for 
assessment of catastrophic risks resulting from uncontained turbine engine 
rotors. 

The methodology was developed during the course of the Concorde SST certifi- 
cation programme* utilising an engine failure model for the Olympus 593. 

In essence this work is applicable to any cuLrcraft type* but it has been 
established that some of the data used produces unrealistically pessimistic 
assessments. 

Work continues to develop realistic guideline data for use in these assess- 
ments* which can be used for future aircraft design. 
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Gordon Gunstone in his paper “aifflno Non Containment - 
The U.K, C.A.A. View” has explained the thinkinir which has 
led to the latest DritiBh„Civil Airworthiness nequirement 
in respect of en/rine non-containroent hazards* 

Alonjsido this one has had to develop numeric met1:odolo£:y by 
the use of which compliance with the requirement can be shown. 

As will be appreciated new requirements cannot bo imposed 
overnight • and in fact the present B.C.A.H. is the culmination 
of some years of joint work between CAA anc' the British Aircraft 
industry, so that the methodology has tende^l to be developed 
alongside the developing requirement. 

Being a numeric method, scxnewhat greater precision can be given 
to answering the question ”where should minimising the risk stop?” 
However it must be emphasised that a numeric answer is an aid to 
engineering judgement and can never entirely replace it. For 
example, if an assessment showed compliance with B.C.A.R., but 
one particular risk, which could be reduced without excessive, 
penalties* constituted a major part of the total risk, it would 
be expected that design action to reduce this risk would be 
taken. 

A summary of the f oregoing appeafs in Figure 1 • 

It cannot today be claimed that the methods are perfect and 
indeed considerably more work is required to establish 
i4itisfactory data values in certain areas which require the 
use of Judgements. However it is hopefully of interest to 
members of the workshop to have some idea of the present 
position. 

2. Background 


The current B.C.A.R. is summarised in Figure 2, and employs a 
relatively simple* failure model. 

This was not always the case, and the story of the practical 
development of the new requirement and ita associated 
methodology really began with the Concorde. Here, because of 
the relatively unorthodox layout of the aircraft, the degree of 
hazard minimising required for parity with subsonic types was 
not immediately obvious. Additionally, although the aircraft 
in ita conception in 1962 had accounted for the poaaibility of 
turbine rupture, accumulating evidence over the years indicated 
the necessity for considering compressor debris as well. Not 
unnaturally argument developed between the conatructora and the 
ARB (as the CAA then was) as to tho required precautions. Since 
numoricsl methods of airworthiness analysis were a fundamental 
part of Concorde cwtification, it aeemed logical to extend 
this to conaideration of engine non-containment riaks. It was 
therefore, agreed to make an assessment against an engine failure 
model to be derived by Rolls-Royce as the most probable failure 
debris baaed on previous non-containment experience and the 
knowledge of the Olympus construction, this resulted in the 
model shown in Figure 3, which took three years and numeroua 
meetings to produoet 
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The requirement was that the probability of catastrop.ie 
should not be worse than 10-8 per aircraft hour, and in 
order to achieve this a number of chan.^yes were made to the 
aircraft, primarily as a result of the inclusion of 
compressor debris. These chants are shown in Fifyure 4 and 5 
the former indicatinfy the armour plate necessary to prevent 
penetration of the fuel tanks and the latter showing systems 
layout and fire precautions modixicatlons. 

It will be noted tliat the model did not include ^ compressor 
disc pieces, since at the time the model was agreed, no 
Rolls-Royce axial engine had ever had a major compressor 
disintegration. Subsequent events, however, led CAA to review 
the situation and to require an assessment of the effect of the 
random release of two ^ compressor disc pieces. Since there 
were insufficient statistics to define the probability of the 
event, it was not possible to include these pieces in the model, 
and a new requirement criterion had to be developed. At this 
stage, a requirement akin to the present DCAR was introduced 
for the compressor ^ disc pieces, such that the probability of 
catastrophe per event, averaged across the flight should not 
be worse than a given number. Originally CAA would have liked 
to see 1 in 20, but this was not possible to achieve, the actual 
value being something like half of this. However an assessment, 
by the same methods and to the same standards, of a number of 
established aircraft showed that these aircraft had no better 
probability of catastrophe, and in some cases considerably worse. 
It was therefore apparent that parity at least with current 
aircraft types was established. 

The final result of this effort, over a period of some six years 
was a certification report two inches thick and working 
documentation and drawings occupying over 90 cubic feet. 

In retrospect this model was probably much too complicated and 
the precautions taken would have been similar had today's DCAR 
model been used, since ^ disc pieces and disc rim fragments 
dominated the exercise* Nevertheless it did result in the 
development of methodology which with further refinement can 
be applied to any aircraft, 

Methodolocy 

3.1* Basic Work 


The initial stages of the assessment consist of the 
following steps* 

a) Eatabliah a hazard tree (Figure 6), This will 
eaaentially be the same for all aircraft, but 
may vary in detail, particularly where methods 
of operation of flying controls differ* 

b) BatabUah debris size for each stage of the 
engine (Figure 7)* 
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c) Draw plan view of fly off zone (Ficure 8) for 
each sta.'re, identifyint; potential risk items 
(e.g. systems, fuel tanks, other engines etc.) 

d) Draw section through fly off zone (Figure 9) 
establishing risk angles for each item potentially 
at risk. It is assumed that ) disc pieces will not 
be stopped, but in the case of the disc rim pieces, 
structural analysis is required to determine whether 
at some structural interface the piece will be 
stopped. The example in Figure 10 shows that engine 
controls and fuel tank are potentially at risk but 
that flying controls and electrics are not. 


3.2. Data and Assu^tions 


3.9.1. Flight Phases 


It will be remembered that the hazard assessment 
is averaged throurdiout the flight, and there will 
be some risks which are only present during certain 
phases of fliglit. Hence It is necessary to break 
down the flight to well defined phases, and while 
this breakdown could vary with the aircraft mission, 
it lias been found so far that th<i three phases 
shown in Figure 11 are suitable for Jet transport 
types. 


3.2.2. Failure distribution by flight 


In assessing the overall risks it is necessary 
to consider the percentage of failures occurring 
in each phase. In practice this can only be 
established statistically and Fispire 12 shows 
the values obtained from three sources. So far, 
in DAC's assessments, the Rolls-Royce values have 
been used, but these are identical with NTSB for 
the phases in use. CAA's analysis gives a slightly 
higher weighting to the take-off phase and sense 
re-thinking here may be necessary. 


3.2.3. Guidelines 

In considering the pot«itial hazards from 
individual contributory factors, some items can 
be dealt with as matters of fact. For example in 
systems areas the design of the aircraft will 
establish clearly whether a catastrophe can or 
cannot occur due to the loss of a givmi system 
or systems. 

In other areas, notably loss of adequate thrust, 
fire, and structural damage an element of Judgement 
is required, in these eases guidelines have been 
discussed and provisionally agreed with CAA. 





3«2«4« Loss of adequate thrust 

Figure 13 shows the probability of catastrophe 
(i.e* of not bein/t able to land the aircraft 
safely) for the loss oi multiple engines. 

Apparent inconsistencies will be noted » and 
these have resulted from CAA Flifrht Department 
knowledfro of the handlinnr of the particulat 
aircraft types considered. It is thouprht that 
for design assessment of new types, a more 
consistent set of numbers needs to be established. 

3.2.5. Fire Hazards 

Figure 14 shows the factors considered in establishing 
fire hazards. In this Ip. the ignition probability 
is a powerful factor. and Figure 15 gives the CAA 
guideline values, 

3.2.6, Structural damage 

Figure 16 shows the CAA guideline lor the minimum 
static ultimate strength requirement to be used 
in considering the size of catastrophic holes in 
primary structure, 

3.3. Calculations 

Having completed the basic work of section 3.1. 

(establishing the risk angle) and assessed the risk 
factor for each hazard, using where appropriate, the 
assumptions from section 3,2,, it is now possible to 
draw for each flight phase and each stage a diagram of 
risk angle versus risk factor as shown in Figure 17. 

(In practice it will probably be found that one diarn*am 
covers several stages, all producing the same angles 
and factors.) 

The individual risks are then summed as shown at the 
bottom of the figure, using success theory for summing 
overlapping risks, i.e. 

Thereafter the averaging method shown on Figure 18, 
will result in the mean catastrophic risk to the 
aircraft across a typical flight mission. 
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In arder to validate the above nothoda and assuaptionst BAC have 
been analysin]; a range of current aircraft to evaluate the 
catastrophic risk level due to ^ disc pieces. The results appear 
on Figure 19, and are indeed surprising, with risks varying froa 
1 in 6.9 for an underwing narrowbody twin to 1 in 27^.8 for a 
widebody triJet, with only two of the types considerlMl neeting 
BCMU 

The actual in>service world wide record derived froa the number of 
fatal accidents conpared with the nunber of najor disc releases 
gives a value of approxinately 1 in 30. In can be argued therefore 
that current aircraft on average nust in practice be coaplying with 
BCMl, and hence the assesscents nust be pessinistic. 

Work is continuing to idantify and study the areas of pessinisa, 
with the objective of aodifying the guidelines where necessary. 

As an end result It is hoped to agree a set of realistic ground 
rules with CAA vdiich will be suitable for future aircraft design 

assessaent. 

Reference to Figure 19 will show that the aost recurring aajor 
oeatributory factors are structural dsaage and fires, and hence 
these are receiving aajor attention. 

With particular regard to critical cut lengths' in fuselage 
structure, work is leading to a acre sophisticated analysis of 
the residual structural strength based on the fracture toughness 
of the Skin aaterlal and the ncainal axial stress before daaaga 
(Figure 29). 

Even this aay still be pessiaistic in nesting the reciuireaent of 
Figure i6, and perhaps this requirenent should be further 
questioned. Who, for exanple, on the basis of analysis, would 
have believed tlMt the aircraft shown in Figure 21 could have 
suffered this anount of danage and survived - but it didt 

6- Oondusicns 


Uethodolo.gy has been established to assess the catastrophic 
risks froa unoontained rotor debris, but further work is 
required to refine the assiaptions used so as to bring the 
results into accord with the known facts. When this is 
done it should be possible, using agreod standards of 
assessaent, to produce cost effective design preeautia*s 
against rotor failure on future aircraft ^rpss. 
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METHODOLOGY DEVELOPED TO MEET 
NEW CAA REQUIREMENTS. 


e GIVES MORE PRECISION TO SAFETY 
ASSESSMENT- BUT: 


9 DOES NOT REPLACE ENGINEERING 
JUDGEMENT. 


Figure 1. - Engine Non-coniainment U. K. Risk Assessment Methods. 


DEBRIS 

TYPE 

ACCEPTABLE * 
CATASTROPHIC 
RISK LEVEL 

N° 

OF 

PIECES 

SPREAD 

ANGLE 

1 

MASS 

REMARKS 

ONE -THIRD 
DISC 

FRAGMENT 

lin 20 

1 


ONE-THIRD 
BLADED DISC 
MASS. 

TRANSLATIONAL 
ENERGY (NEGLECTING 
ROTATIONAL ENERGY) 

DISC RIM 
PIECE 

lin 60 

1 

15’ 

GREATER OF^ 
BLADED DISC 
MASS OR MASS 
Of TWO BLADES 
WITH ROOTS. 

TRANSLATIONAL 
ErJERGY (NEGLECTING 
ROTATIONAL ENERGY) 

MULTIPLE ONE- 
THIRD DISC 
FRAGMENTS 

lin 10 

3 

13* 

AS FOR SINGLE 
ONE-THIRD 
DISC FRAGMENT 

APPLICABLE TO OUPUCATEO 
OR MULTIPUCATEO SYSTEMS 
ONLY. ENERGY AS DEFINED 
FOR SINGLE ONE-THIRO 
DISC FRAGMENT. 


1. AVERAGE OF ALL DISCS & ALL ENGINES ACROSS TYPICAL 
FLIGHT PUN. 

2. NO SINGLE DISC MUST HAVE RISK GREATER THAN 
TWICE THE REQUIRED AVERAGE RISK. 

Figure Z - BCAR Engine Failure Model. 
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GREEyvEUCW HYORAUUCS- 


-SEGN.OFiESSENTIAL • 
■V ELEC CABLES.v< 


.Ml ML ^ 


-BLU0eaOW HVORAUUCS. 


FUEL S.a VALVES - 


ouPLiCATEo aeaRics 

TC FUa SHUT-OFF VALVES. 
SECONOW AIR DOORS. 
FJRE EXTINGUIS«RS i 
SEGREGATED. 


PRESSURE REUEF- 
VALVES IN ACCESS 
PANEISITDP SKIN) 


/ RE-ROUTE 
'^OF HYOWUJC 
PIPES 


^BAV 

FUSE AO3E0 Jn' ' 

HYORAUUC GREEN 
SYSTEM PIPE. 


■ INTUfCSCENT PAINT ON COVERS 
OP EARTHING POINTS ON WING 
. LOWER SKIN PUIELS. 


\ OPEARTI 
\ .LOWER 


POLYAMIDE 
RESIN FIBRE- ^ 
GLASS SEAUNG T 
ji PANELS-v A 


-INTUCSCENT 

PAINT. 


MATERIAL OF RYING- 
CONTROLS CHANGED 
TO TITANIUM. 


• CABIN AIR ISOUTION IMPROVED SEAUNG TITAh 

VALV'E (CLOSED BY ! INTU»€SCENT RNNT. Pame 

THERMOSWITCH) added 
IN EACH AIR SUPPLY 

line. fire precautions 


complete depth 

T1TANUA4 SEAUNG 
PANELS. 


SYSTEMS 


Figure 3. - Concorde - Design Precautions to Minimise Mw Failure Damage 


HAZARD 


STRUCTURE 


ESSENTIAL 

SYSTEMS 


FIRES 

EXPLOSION 


LOSS OF 
THRUST 


OPERATION 


Hl/TAIL 


FUGHT CREW 
iNCARUnTANCE 


SamAGT^ fmm DAMAGE TO DAMAGE TO 

FUa FEED ENGINE C ONTROLS EXHAUST 

DAMAGE 


^viNG (essential Emergen 

CONTROLS HWWUW CABLES \p5hEH 


I um HRES 

Ipenetr^ationI external 
TO TANKS 


Figure 6. • Engine Rotor Failure - Hazard Tree 
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r» BUDED DISC RADIUS 



DISC RIM PIECE 


Figure 7. - BCAR Det)ris. 


/ 



i 


54 



1 * . 








1. TAKE OFF -START OF ROLL TO 


2. TAKE OFF - TO 1.500 FT. 

3, POST TAKE OFF- 1500 FT TO TOUCHDOWN. 


Figure IL - Flight Phase Breakdown. 



0 ROLLS’ROYCE ENGINES ( 1954-1970 STATISTICS) 

0 N.T.S.B. REPORT NTSB- AAS- 74 -4. 

0 CAA - GUNSTON , 'ENGINE NON CONTAINMENT - THE UK CAA VIEW.* 


Figure - Distribution of Uncontained Failures Over Flight Phases. 
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NO OF ENGINES LOST 


FLIGHT 

PHASE 

1 

2 

3 

4 

AICRAFT TYPE 

0 TO 

Vi 

0 

0 



REAR OR UNDERWING 

Vi TO 

1.500FT 

0 

■7 



ENGINED TWIN -JET. 

POST 

1.500FT 

0 

•6 




0 TO 

Vl 

0 

0 

0 



Vi TO 

1,500 FT 

0 

•4 

•85 


REAR ENGINED TRI-JET 

POST 

1,500FT 

0 

0 

•75 



0 TO 

Vi 

0 

0 

0 

0 


Vi TO 

750 FT 

0 

■8 

•8 

•8 








FOUR REAR MOUNTED 

750 TO 

1500FT 

0 

•2 

•5 

•8 

ENGINES. 

POST 

1500 FT 

0 

0 

•2 

•7 


0 TO 

Vi 

0 

0 

N/A 

0 


Vi TO 

1,500 FT 

0 

•25 

N/A 

•7 

FOUR UNOERWING PODDED 

POST 

1,500 FT 

0 

0 

n/a 

•6 

ENGINES. 


Figure 13L - Risk Factors for Loss of Thrust (Expressed as a fraction of L ) 


V / 



PHASE 

Tr 

Ir 

Hr 

Lr 

Er 

GROUND ROLL 
TO Vi 






Vi TO 1,500 FT 






POST 1,500 FT 







Tr « PROPORTION OF FLIGHT PHASE THAT FUEL IS PRESENT IN PENETRATED 
, TANK. 

Ir - IGNITION PROBABIUTY. 

Hr = PROBABILITY OF FIRE SITUATION BECOMING POTENTIALLY CATOSTROPHIC. 
LR - PROBABIUTY OF NOT LANDING SAFELY AND EVACUATING MSSENGERS 
WITH POTENTIALLY CATASTROPHIC FIRE. 

Er •probability of a catastrophic explosion at instant of 

PENETRATION =Ir X STRUCTURAL RESISTANCE TO OVERPRESSURE. 
PROBABILITY OF CATASTROPHE *(Tr X Irx HRX Lr) +Er 


Figure 14 - Risk Factors for Fuel Tank Fire and Explosion. 
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FUEL 

PIPE 




DRY 



bay 





0reNETRATING 
DEBRIS 

FUEL TEMP ABOVE LOWER FLAMMABIUTY 
LIMIT FOR VAPOUR ASSUME 807. 
PROBABILITY OF FIRE. 

FUEL TEMP WITHIN MIST REGION 
ASSUME 57. PROBABILITY OF FIRE AT 
-50 *C RISING LINEARLY TO 807. AT 
LOWER FLAMMABILITY LIMIT FOR 
VAPOUR. 



FLAMMIBILITY LIMITS FOR FUEL VAPOUR AND MIST 


DRY 

^-.••VAPOUR 

BAY 

£ 1 




'^:/yAPOUR<V.^.:; 


•'-FUEL' 




FUEL TEMP WITHIN FLAMMABILITY 
LIMITS FOR VAPOUR AND DEBRIS 
PENETRATES ULLAGE SPACE WITHOUT 
PASSING THROUGH FUEL. ASSUME 90*/. 
PROBABILITY OF AN EXPLOSION. 


FUEL TEMP WITHIN FLAMMABIUTY UMITS FOR 
VAPOUR AND DEBRIS PENETRATES TANK BEUDW 
FUEL SURFACE AND PASSES THROUGH ULLAGE 
SPACE. ASSUME 707. PROBABIUTY OF EXPLOSION. 

IF FUEL TEMP IS WITHIN MIST REGION ASSUME 
5*4 PROBABIUTY OF AN EXPLOSION AT-50*C 
RISING LINEARLY TO 707. AT LOWER 
FLAMMABILITY LIMIT FOR VAPOUR. 


Figure 15. - Ignition Risk Factors, l(^. 


* / 


A. 70“/. UMIT FLIGHT MANOEUVERING LOAD. 

20 pySEC EAS GUST (VERTICAL OR LATERAL) AT Vc 

COMBINED V/ITH MAXIMUM CABIN DIFFERENTIAL 
PRESSURE (PLUS AERODYNAMIC SUCTION). 


B. M (MAXIMUM NORMAL CABIN DIFFERENTIAL 

PRESSURE AT TIME OF INCIDENT PLUS AERODYNAMIC 
SUCTION) PLUS 1g FLIGHT LOAD FREEDOM FROM 
FLUTTER UP TO Vc. 


Figure 16. - Minimum Static Ultimate Strength Requirement 
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FOR EACH ENGINE STAGE IN EACH FLIGHT PHASE 

• OERFVE POTENTIALLY CATASTROPHIC ANGLES (oC) FOR EACH HAZARD. 

• DERIVE RISK FACTOR (F) FOR EACH HAZARD. 

• CALCUUTE COMBINED RISK FACTOR (Csp) FDR THE PHASE AND AVERAGE 
OVER 360* (n RISKS) 

Csp = Dp X Fi + (I 2 R ■ • • • «n Fn) Dp “PHASE FAILURE niSTRlBUTlON. 
THEN 

• SUM COMBINED RISK FACTOR FOR THE STAGE OVER THE TOTAL FUGHT 
{>' PHASES) TO OBTAIN OVERALL STAGE RISK(Cs). 

Cs» CsPi4-Csf^' "CsPp 

• AVERAGE AU STAGES OVER THE TOTAL ENGINE! VSTAG^) TO OBTAIN 
MEAN ENGINE RISKlCe) 

Ce “ Cgj + C$2 Css 

s 

• AVERAGE ALL ENGINES OVER THE AIRCRAFT (E'eNGINES) TO OBTAIN 
MEAN AIRCRAFT RISK (Ca) 

Ca= Ce^+C£2*'*'Ceg 

E 


Figure la - Engine Relor Mlure - Risk Evatuatioa 



AIRCRAFT TYPE 

CATASTROPHIC 
RISK RATIO 

MAJOR CONTRIBUTARY FACTORS. 

TWO REAR ENGINES - 
NARROWBOOY 

h IN 23.3 ^ 

^ ^ ^ ^ ^ > 

1. LOSS OF ADEQUATE THRUST. 

2. FUSELAGE STRUCTURAL DAMAGE. 

TWO UNDERWING ENGINES - 
NARROWBODY 

1 IN 6-9 

l.FUEL TANK FIRES. 

THREE REAR ENGINES - 
NARROWBODY 

1 IN 9-2 

1. FUSELAGE /FIN STRUCTURAL DAMAGE 

2. FIPE. 

3. LOSS OF ADEQUATE THRUST. 

FOUR REAR ENGINES - 
NARROWBOOY 

1 IN 12‘7 

1. LOSS OF ADEQUATE THRUST. 

FOUR UNDERWING ENGINES - 
NARROWBOOY 

1 IN 15-8 

1. WING STRUCTURAL DAMAGE. 

2. FUSELAGE STRUCTURAL DAMAGE. 

ONE REAR. TWO UNOERWING 
E.NGINES- WIDE BOOV 

IN 27-8 ^ 

1. FUSELAGE STRUCTURAL DAMAGE. 

2. WING STRUCTURAL DAMAGE . 

FOUR UNDERWING ENGINES 
WIDE BODY 

1 IN 15-9 

1. WING STRUCTURAL DAMAGE. 

2. FUSELAGE STRUCTURAL DAMAGE. 


ALL TYPES - WORLDWIDE APPROX. 

STATISTICS 1 IN 30 


Figure 19. - Summary of BAC Assessments for Single 1/3 Disc Piece. 


AN APPROXIMATION OF CRITICAL CRACK LENGTH FOR 
CATASTROPHIC CIRCUMFERENTIAL FUSELAGE DAMAGE IS 
GIVEN BY THE FOLLOWING, AND MAY BE USED FOR 
CRACKS OF UP TO 100 INCHES IN LENGTH. 

CRACK LENGTH 2oc» Kc 

n' 6 

WHERE Kc= FRACTURE TOUGHNESS OF SKIN MATk 

6 = NOMINAL AXIAL STRESS BEFORE 
DAMAGE UNDER CRITICAL LOADING 
CASE 

Figure 2D - Catastrophic 1/3 Disc Fuseiage Damage. 


60 







/ , 




I 


► 


/ ' 


#• * 


* • 


A 


- 





Figure 2L - Fuselage Deinage - BAC 1-lL 
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DISCUSSION 


John Meaney, Rohr 

I have a question on the armor plate slide that you showed on the 
Concorde. What material is that and what total weight impact was it, and 
what was the largest energy magnitude that your* re trying to absorb? 

J.C. Wallin, BAC 

The material was titanium. We looked at a number of different 
materials including non-metallics and so on, and found in the end that 
titanium was the lightest that we could use. For our testing the fragment 
that we dealt with was a full energy single blade which in the failure model 
was the equivalent (in energy terms) of a disk ring piece plus a couple of 
blades, (which having penetrated the casing, will have lost some energy) . 

From the point of view of armor design, the single blade was a critical 
piece because, of course, you had the highest impact pressure (acting on‘the 
small area) . We designed on that criterion. The actual weight we added to 
the airplane was something of the order of a thousand pounds. I said earlier 
(when I was commenting on I think it was Ken Forney's talk this morning) it 
could well be that in the case of an airplane of this particular configuration 
that the extra containment within the engine to cope with a rim- and- three-blades 
piece might have been more cost-effective. But I think that is applicable only 
to this configuration of airplcine. 

J. Meaney, Rohr t 

What titanium metal alloy was used? For these pieces that you tested, 
what weights eind velocities were used? 

J.C. Wallin, BAG 

The material is commercially pure titanixim. The biggest piece we had to 
deal with was cui LP 1 blade, which was five pounds in weight, with a velocity 
of 680 fps. 

J. Gausselin, Rockwell International 

In 1972 you people conducted tests, firing projectiles into fuel tanks, 
to simulate the fan blades you were talking about. These were preliminary 
tests and the conclusions were preliminary. You may be doing, more testing. 

I haven't seen anything further in this program. Are you doing anything 
further emd if so, vdiere can the results be obtained? 

J.C. Wallin, BAC 

At the time we had to deal with the fuel tanks because we thought that 
blades being fired into fuel tanks (%diere the blade passed through the fuel 
before it got into the vapor space), was probably not a very high ignition 
risk. So we started doing these tests to try to generate some data to prove 
our case if you like* Now, in point of fact what we came up with was that 


62 


( 


j 

f. - 




' by. 






tifl. 



% 


within the first six firings, we generated four explosions, due to titanium 
blades nicking structure. We had been looking at the prime ignition source 
as being the blade temperature. What we found was that when we fired the 
blade into a representative tank, as soon as the blade hit the structure inside 
the tank, even though it passed through the fuel in the first place, we actually 
generated sparks of sufficient magnitude to set off the explosion. At that 
point we abandoned our original line of thinking and, therefore, abandoned the 
tests, I think in that respect, even if we had been right in our original 
thinking, the cost of the testing we would have had to have done to prove our 
case would have been so high that we would probably have abandoned it anyway. 

This was because we would have needed to do it a thousand times or so with no 
ignition to prove the case statistically. Since we could, in fact, get explosions 
in the tank if titanium blades were being fired into it, v;e faced up to the facts 
and decided to develop our armor for the tanks. 

One other thing that we found in general, both in the case of firing into 
tanks and also doing our armor testing, was that a lot of the information which 
you get from ballistic firings (typical of military projectiles) is totally | 

irrelevant to the engine burst case where one is dealing with non-uniform shapes , 

and sharp corners. With things of that sort, the results can be very different ^ 

from those derived from bullet firings. 

i 

» 

* 

f 

I 



i 


k 


63 



t 





. 5 Vi# ’• * |i t 




F • 





